Martijn Wargers

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 3.5.16 Mozilla Firefox versions 3.6.x prior to 3.6.13 SeaMonkey versions prior to 2.0.11 **Description** The issue involves a use-after-free vulnerability that can be exploited by remote attackers to execute arbitrary code. This is achieved through vectors involving a change to an `nsDOMAttribute` node. **Recommendations** For Mozilla Firefox versions prior to 3.5.16, update to version 3.5.16 or later. For Mozilla Firefox versions 3.6.x prior to 3.6.13, update to version 3.6.13 or later. For SeaMonkey versions prior to 2.0.11, update to version 2.0.11 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions 3.6.x before 3.6.11 Thunderbird versions 3.1.x before 3.1.5 **Description** The issue is related to multiple unspecified vulnerabilities in the browser engine, which can be exploited by remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors. **Recommendations** For Mozilla Firefox versions 3.6.x before 3.6.11, update to version 3.6.11 or later. For Thunderbird versions 3.1.x before 3.1.5, update to version 3.1.5 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 3.0.16 Mozilla Firefox versions 3.5.x prior to 3.5.6 SeaMonkey versions prior to 2.0.1 Thunderbird versions prior to 2.0.1 **Description** The issue affects the browser engine, allowing remote attackers to cause a denial of service, which includes memory corruption and application crash, or possibly execute arbitrary code. The exact vectors used for the attack are unknown. **Recommendations** For Mozilla Firefox versions prior to 3.0.16, update to version 3.0.16 or later. For Mozilla Firefox versions 3.5.x prior to 3.5.6, update to version 3.5.6 or later. For SeaMonkey versions prior to 2.0.1, update to version 2.0.1 or later. For Thunderbird versions prior to 2.0.1, update to version 2.0.1 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 3.0.11 Thunderbird versions prior to 2.0.0.22 SeaMonkey versions prior to 1.1.17 **Description** The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via several vectors related to the browser engine, including `nsEventStateManager::GetContentState`, `nsNativeTheme::CheckBooleanAttr`, `UnhookTextRunFromFrames`, `ClearAllTextRunReferences`, `nsTextFrame::ClearTextRun`, `IsPercentageAware`, `PL DHashTableFinish`, `nsListBoxBodyFrame::GetNextItemBox`, `AtomTableClearEntry`, `nsHTMLEditor::HideResizers`, and `nsWindow::SetCursor`. These vectors are related to the atom table, DOM mutation events, and Unicode surrogates. **Recommendations** For Mozilla Firefox versions prior to 3.0.11, update to version 3.0.11 or later. For Thunderbird versions prior to 2.0.0.22, update to version 2.0.0.22 or later. For SeaMonkey versions prior to 1.1.17, update to version 1.1.17 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions 3.x before 3.0.6 Thunderbird versions before 2.0.0.21 SeaMonkey versions before 1.1.15 **Description** The issue is related to multiple unspecified vulnerabilities in the layout engine, specifically with the destruction of arbitrary layout objects by the nsViewManager::Composite function. This can cause a denial of service due to memory corruption and application crash, or potentially allow the execution of arbitrary code. **Recommendations** For Mozilla Firefox versions 3.x before 3.0.6, update to version 3.0.6 or later. For Thunderbird versions before 2.0.0.21, update to version 2.0.0.21 or later. For SeaMonkey versions before 1.1.15, update to version 1.1.15 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions 3.x before 3.0.4 Thunderbird versions 2.x before 2.0.0.18 SeaMonkey versions 1.x before 1.1.13 **Description** The issue allows remote attackers to cause a denial of service, resulting in a crash, via multiple vectors that trigger an assertion failure or other consequences. **Recommendations** For Mozilla Firefox versions 3.x before 3.0.4, update to version 3.0.4 or later. For Thunderbird versions 2.x before 2.0.0.18, update to version 2.0.0.18 or later. For SeaMonkey versions 1.x before 1.1.13, update to version 1.1.13 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 2.0.0.15 Thunderbird versions prior to 2.0.0.14 SeaMonkey versions prior to 1.1.10 **Description** The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This is related to unspecified vulnerabilities in the layout engine. **Recommendations** For Mozilla Firefox versions prior to 2.0.0.15, update to version 2.0.0.15 or later. For Thunderbird versions prior to 2.0.0.14, update to version 2.0.0.14 or later. For SeaMonkey versions prior to 1.1.10, update to version 1.1.10 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 2.0.0.12 Thunderbird versions prior to 2.0.0.12 SeaMonkey versions prior to 1.1.8 **Description** The issue allows remote attackers to cause a denial of service and possibly trigger memory corruption via certain vectors related to specific methods, including `nsTableFrame::GetFrameAtOrBefore`, `nsAccessibilityService::GetAccessible`, `nsBindingManager::GetNestedInsertionPoint`, `nsXBLPrototypeBinding::AttributeChanged`, `nsColumnSetFrame::GetContentInsertionFrame`, and `nsLineLayout::TrimTrailingWhiteSpaceIn`. **Recommendations** For Mozilla Firefox versions prior to 2.0.0.12, update to version 2.0.0.12 or later. For Thunderbird versions prior to 2.0.0.12, update to version 2.0.0.12 or later. For SeaMonkey versions prior to 1.1.8, update to version 1.1.8 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 2.0.0.5 Thunderbird versions prior to 2.0.0.5 **Description** The issue is related to multiple unspecified vulnerabilities in the browser engine that can cause a denial of service (crash) due to memory corruption when processing unspecified vectors. **Recommendations** For Mozilla Firefox versions prior to 2.0.0.5, update to version 2.0.0.5 or later. For Thunderbird versions prior to 2.0.0.5, update to version 2.0.0.5 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions 1.5.x through 1.5.0.11 Mozilla Firefox versions 2.x through 2.0.0.3 Thunderbird versions 1.5.x through 1.5.0.11 Thunderbird versions 2.x through 2.0.0.3 SeaMonkey version 1.0.9 SeaMonkey version 1.1.2 **Description** The issue allows remote attackers to cause a denial of service, resulting in a crash, via vectors related to dangling pointers, heap corruption, signed/unsigned, and other issues. **Recommendations** For Mozilla Firefox versions 1.5.x through 1.5.0.11, update to version 1.5.0.12 or later. For Mozilla Firefox versions 2.x through 2.0.0.3, update to version 2.0.0.4 or later. For Thunderbird versions 1.5.x through 1.5.0.11, update to version 1.5.0.12 or later. For Thunderbird versions 2.x through 2.0.0.3, update to version 2.0.0.4 or later. For SeaMonkey version 1.0.9, update to a version later than 1.0.9. For SeaMonkey version 1.1.2, update to a version later than 1.1.2.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 1.5.0.10 Mozilla Firefox versions 2.x prior to 2.0.0.2 Thunderbird versions prior to 1.5.0.10 SeaMonkey versions prior to 1.0.8 **Description** The issue affects the layout engine, allowing remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via certain vectors. **Recommendations** For Mozilla Firefox versions prior to 1.5.0.10, update to version 1.5.0.10 or later. For Mozilla Firefox versions 2.x prior to 2.0.0.2, update to version 2.0.0.2 or later. For Thunderbird versions prior to 1.5.0.10, update to version 1.5.0.10 or later. For SeaMonkey versions prior to 1.0.8, update to version 1.0.8 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 1.5.0.5 Thunderbird versions prior to 1.5.0.5 SeaMonkey versions prior to 1.0.3 **Description** The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption. This includes problems with `nsListControlFrame::FireMenuItemActiveEvent`, buffer overflows in the string class in out-of-memory conditions, table row and column groups, anonymous box selectors outside of UA stylesheets, stale references to removed nodes, and running the `crypto.generateCRMFRequest` callback on deleted context. **Recommendations** For Mozilla Firefox versions prior to 1.5.0.5, update to version 1.5.0.5 or later. For Thunderbird versions prior to 1.5.0.5, update to version 1.5.0.5 or later. For SeaMonkey versions prior to 1.0.3, update to version 1.0.3 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox version 1.5.0.2 **Description** The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe. This occurs when designMode is enabled, causing a reference to a deleted controller context object. **Recommendations** For Mozilla Firefox version 1.5.0.2, consider disabling the designMode feature as a temporary workaround until a patch is available. Restrict access to iframes with enabled designMode to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox (affected versions not specified) Mozilla Thunderbird (affected versions not specified) Mozilla Seamonkey (affected versions not specified) Description: Potential security vulnerabilities have been identified that could be exploited remotely, resulting in unauthorized access, elevation of privileges, or Denial of Service (DoS). Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 1.0.x through 1.0.7 and versions 1.x through 1.4 Mozilla Thunderbird versions 1.0.x through 1.0.7 and versions 1.x through 1.4 Mozilla Suite versions prior to 1.7.13 SeaMonkey versions prior to 1.0 Description: The issue allows remote attackers to cause a denial of service by changing the `-moz-grid` and `-moz-grid-group` display styles, leading to a crash. Recommendations: For Mozilla Firefox versions 1.0.x through 1.0.7 and versions 1.x through 1.4, update to version 1.0.8 or 1.5 or later. For Mozilla Thunderbird versions 1.0.x through 1.0.7 and versions 1.x through 1.4, update to version 1.0.8 or 1.5 or later. For Mozilla Suite versions prior to 1.7.13, update to version 1.7.13 or later. For SeaMonkey versions prior to 1.0, update to version 1.0 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 1.5.0.1 Thunderbird version 1.5 SeaMonkey versions prior to 1.0 **Description** The issue allows remote attackers to execute arbitrary code by changing an element's style from position:relative to position:static, which causes Gecko to operate on freed memory. **Recommendations** For Mozilla Firefox versions prior to 1.5.0.1, update to version 1.5.0.1 or later. For Thunderbird version 1.5, disable Javascript in mail to mitigate the risk. For SeaMonkey versions prior to 1.0, update to version 1.0 or later.